OctoPrint

Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3.

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.

Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3.

OctoPrint provides a web interface for controlling consumer 3D printers.

OctoPrint provides a web interface for controlling consumer 3D printers.

If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.

OctoPrint provides a web interface for controlling consumer 3D printers.

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081.

OctoPrint provides a web interface for controlling consumer 3D printers.

Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.

An attacker can freely brute force username and password and can takeover any account.

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.

OctoPrint is a web interface for 3D printers.

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.

Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.

OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.

OctoPrint provides a web interface for controlling consumer 3D printers.

OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-data request to OctoPrint and through that make the web server…

OctoPrint provides a web interface for controlling consumer 3D printers.

OctoPrint provides a web interface for controlling consumer 3D printers.

OctoPrint provides a web interface for controlling consumer 3D printers.

OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, with…

OctoPrint provides a web interface for controlling consumer 3D printers.

OctoPrint provides a web interface for controlling consumer 3D printers.

OctoPrint provides a web interface for controlling consumer 3D printers.